Lucene search
+L

14968 matches found

NVD
NVD
•added 2022/07/28 5:15 p.m.•24 views

CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

6.1CVSS0.01315EPSS
SaveExploits1References3
osv_alpine
osv_alpine
•added 2022/07/28 5:15 p.m.•12 views

ALPINE-CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

6.1CVSS6.3AI score0.01315EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2022/07/28 5:15 p.m.•14 views

DEBIAN-CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

6.1CVSS6.2AI score0.01315EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/07/28 5:15 p.m.•18 views

UBUNTU-CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

6.1CVSS6.7AI score0.01315EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2022/07/28 5:15 p.m.•37 views

CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

6.1CVSS6.7AI score0.01315EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2022/07/28 4:52 p.m.•62 views

CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

6.1CVSS6.3AI score0.01315EPSS
SaveExploits1
Cvelist
Cvelist
•added 2022/07/28 4:52 p.m.•41 views

CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

6.2AI score0.01315EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2022/07/28 4:52 p.m.•60 views

CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

6.1CVSS6.2AI score0.01315EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2022/07/28 12:00 a.m.•65 views

Lack of authentication mechanism in Jenkins Git Plugin webhook

Git Plugin provides a webhook endpoint at /git/notifyCommit that can be used to notify Jenkins of changes to an SCM repository. For its most basic functionality, this endpoint receives a repository URL, and Jenkins will schedule polling for all jobs configured with the specified repository. In Gi...

7.5CVSS7.5AI score0.07005EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2022/07/28 12:00 a.m.•139 views

GHSA-8XWJ-2WGH-GPRH Lack of authentication mechanism in Jenkins Git Plugin webhook

Git Plugin provides a webhook endpoint at /git/notifyCommit that can be used to notify Jenkins of changes to an SCM repository. For its most basic functionality, this endpoint receives a repository URL, and Jenkins will schedule polling for all jobs configured with the specified repository. In Gi...

6.5CVSS5.8AI score0.0074EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2022/07/28 12:00 a.m.•49 views

Lack of authentication mechanism in Jenkins Git Plugin webhook

Git Plugin provides a webhook endpoint at /git/notifyCommit that can be used to notify Jenkins of changes to an SCM repository. For its most basic functionality, this endpoint receives a repository URL, and Jenkins will schedule polling for all jobs configured with the specified repository. In Gi...

5.3CVSS6.1AI score0.01089EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb
•added 2022/07/27 3:15 p.m.•13 views

CVE-2022-36883

A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

7.5CVSS5.8AI score0.07005EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2022/07/27 3:15 p.m.•27 views

CVE-2022-36882

A cross-site request forgery CSRF vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

8.8CVSS8.7AI score0.0074EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/07/27 3:15 p.m.•15 views

CVE-2022-36882

A cross-site request forgery CSRF vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

8.8CVSS5.6AI score0.0074EPSS
SaveExploits0References3
Prion
Prion
•added 2022/07/27 3:15 p.m.•19 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

6.8CVSS8.5AI score0.0074EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/07/27 3:15 p.m.•36 views

Design/Logic Flaw

A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

5CVSS7.4AI score0.07005EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
•added 2022/07/27 2:21 p.m.•119 views

CVE-2022-36883

A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

7.5CVSS4AI score0.07005EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/07/27 2:20 p.m.•39 views

CVE-2022-36882

A cross-site request forgery CSRF vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

8.8AI score0.0074EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2022/07/27 2:20 p.m.•92 views

CVE-2022-36882

A cross-site request forgery CSRF vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

8.8CVSS4.4AI score0.0074EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/07/27 12:00 a.m.•23 views

Lack of authentication mechanism in git webhook

git provides a webhook endpoint at /git/notifyCommit that can be used to notify Jenkins of changes to an SCM repository. For its most basic functionality, this endpoint receives a repository URL, and Jenkins will schedule polling for all jobs configured with the specified repository. In git 4.11....

8.8CVSS6.4AI score0.07005EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder